CiscoCertified Network Professional Security
Domain 3Objective 2
3.2 Select Security Capabilities, Deployment Models, Cloud Security Frameworks, and Policy Management to Secure the Cloud 350-701 Practice Questions (Page 2)
Part of the Cloud Security domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
5concepts
15%of the exam
Questions 6–10
- 6
A company is moving a legacy application to the cloud. The application requires a specific OS version and the security team needs full control over the OS configuration, including kernel-level security settings. They also need to ensure the application is isolated from other tenants. Which combination of service and deployment model is most appropriate?
Select an answer first - 7
A company is migrating a legacy application to a cloud provider using a virtual machine. The security team is responsible for patching the OS and configuring the host-based firewall. According to the shared responsibility model, which cloud service model are they using?
Select an answer first - 8
A company has a hybrid cloud environment. They want to implement a policy that automatically revokes access to a cloud application if a user's device is compromised or if they are in a high-risk location. Which policy management approach is best suited for this dynamic, context-aware access control?
Select an answer first - 9
A security team is using the CSA Cloud Controls Matrix (CCM) to assess their cloud provider. They are specifically reviewing the 'Data Encryption' control. Which aspect of the cloud environment does this control primarily address?
Select an answer first - 10
A startup wants to minimize its security management overhead and is considering using a cloud-based email and collaboration suite. They want the provider to be responsible for patching the underlying infrastructure and securing the application. Which service model does this represent?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.